CVE-2017-17974 in BAS Web信息

摘要

由 MITRE

BA SYSTEMS BAS Web on BAS920 devices (with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*) and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/get_sid_js.aspx or isc/get_sid.aspx, as demonstrated by obtaining administrative access by subsequently using the credential information for the Supervisor/Administrator account.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2017-12-29

披露

2017-12-29

管理

已接受

条目

VDB-111184

CPE

准备好

CWE

CWE-255 (已确认)

CVSS

9.8 (NVD)

EPSS

0.01674

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2017-17974
NVD	https://nvd.nist.gov/vuln/detail/CVE-2017-17974
CVE Details	https://www.cvedetails.com/cve/CVE-2017-17974/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!